Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3233322e302f32332d3234203d3e2031323339.roa
File:                     3231362e39372e3233322e302f32332d3234203d3e2031323339.roa (raw, json)
Hash identifier:          ZpA0hCmoZEiWTN1zfuzjCh+I0/f1dWFTkLSiut09uHo=
Subject key identifier:   E5:E7:22:CB:50:72:F3:76:A4:1A:06:C7:54:79:ED:AA:9D:05:2E:5C
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       0A0A1B5E380A84F6886B47FBE301EA999096F7FE
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3233322e302f32332d3234203d3e2031323339.roa
Signing time:             Mon 18 Jul 2022 14:09:53 +0000
ROA not before:           Mon 18 Jul 2022 14:04:53 +0000
ROA not after:            Mon 17 Jul 2023 14:09:53 +0000
asID:                     1239
IP address blocks:        216.97.232.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:0a:1b:5e:38:0a:84:f6:88:6b:47:fb:e3:01:ea:99:90:96:f7:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:04:53 2022 GMT
            Not After : Jul 17 14:09:53 2023 GMT
        Subject: CN=E5E722CB5072F376A41A06C75479EDAA9D052E5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4d:a4:60:31:e7:54:38:10:44:b3:26:ab:b5:
                    7d:2c:e9:59:ce:4b:c5:0e:ec:91:45:98:51:a4:99:
                    c8:f1:e2:11:fc:b4:a5:c3:ed:67:f0:2c:fc:d3:8d:
                    44:24:3f:26:42:3a:80:16:48:54:3a:f1:a5:8e:2f:
                    b0:9b:3f:2a:e0:a7:a9:77:fb:92:95:aa:e3:2e:af:
                    a4:67:1f:2d:e8:21:de:cd:8a:cb:d8:d4:36:ab:8e:
                    7f:db:84:af:c0:c4:69:c2:50:6c:74:89:9b:29:be:
                    a0:43:76:2a:c1:86:0c:1c:3f:e6:38:f1:63:cb:5e:
                    3d:1d:42:6a:90:fb:46:f2:87:ee:03:07:c2:53:57:
                    81:b5:7c:b9:07:f2:27:f4:21:9c:b4:88:e6:22:a4:
                    16:12:9d:60:1d:57:95:42:9c:f1:fc:94:18:c2:78:
                    ad:90:4a:2f:d0:9a:a1:b4:a2:75:12:f2:0a:89:7a:
                    a7:c7:7d:c7:4f:bc:bf:1f:26:aa:29:1d:db:7f:9b:
                    e9:e7:a3:75:76:b8:8d:92:5c:42:53:83:f8:ad:73:
                    d0:4a:42:4f:eb:3e:e0:d1:f4:50:d9:c8:ec:23:32:
                    73:c1:c2:d8:e7:35:a0:41:ee:7f:99:f8:b5:8d:cd:
                    12:a2:80:ce:39:d5:86:2b:11:f6:a4:09:c8:1a:44:
                    34:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E7:22:CB:50:72:F3:76:A4:1A:06:C7:54:79:ED:AA:9D:05:2E:5C
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3233322e302f32332d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:a8:d5:d4:46:bc:19:3b:06:5e:e6:47:31:4e:76:57:17:10:
         d9:6b:87:1d:09:b6:38:d0:6b:1f:88:4e:41:33:2e:9a:1b:bc:
         13:a4:c4:90:7b:7e:98:a8:c4:07:79:7c:90:fd:1d:23:1d:41:
         21:a7:c8:8f:8d:12:82:84:9f:ac:ab:f2:db:8e:0e:3f:7c:0b:
         29:c2:01:ed:f4:82:25:be:e0:69:7d:a6:e9:c6:4a:c0:c1:0e:
         ef:a4:7e:4f:d3:b1:5d:c1:43:9d:4f:92:d2:7e:02:9f:11:9b:
         94:d3:ec:7e:eb:05:d4:98:b2:02:60:4c:22:fc:b2:47:f1:09:
         1d:ae:4e:3e:c4:bc:e3:75:d5:8a:73:40:b8:0c:f5:70:dd:9a:
         70:e7:31:19:a0:a5:f9:ee:7d:39:ec:8b:7f:39:f8:18:96:03:
         8d:23:bf:b0:3a:73:4e:f9:c1:9d:66:2b:56:ef:58:c2:7d:e9:
         2f:e0:d5:6d:b9:41:5b:a6:40:33:5f:18:c9:b2:42:1e:7d:91:
         ad:a9:9f:9b:04:e6:43:59:79:60:9d:3d:4c:49:32:f8:cc:91:
         d3:df:e4:77:c6:4f:91:55:68:00:41:b7:58:2f:d1:0f:d6:93:
         fc:5e:94:15:68:1a:e7:90:8f:78:c9:58:eb:66:30:c2:11:39:
         9c:79:46:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----